Home
 >
Legal
 >

Privacy Policy

Rust-Oleum – Privacy Notice

Privacy Policy

Rust-Oleum Corporation

Privacy Notice

Last Updated: November 21, 2025

Jurisdictional Data Privacy Rights

RPM International Inc., and its affiliates, subsidiaries, and operating companies (the “Company,” “us,” “we”) understands the importance of protecting your privacy, and this Privacy Policy sets out how we process personal information. It describes, among other things, the types of personal information that we collect, the purposes for which we use it, the types of third parties with whom we share it, and the rights and responsibilities you may have with respect to it.

This Privacy Policy applies to the personal information you provide us when you (i) visit any website or interact with software that we own, license, or otherwise operate and that links to this Privacy Policy (each, a “Site”), (ii) purchase or receive products, goods, or services through the Site, or (iii) visit our offices or otherwise contact or engage with us. For purposes of this Privacy Policy, the Site and all products, goods and services sold or furnished by the Company through a Site are collectively referred to as the “Services.”

PLEASE READ THIS PRIVACY POLICY CAREFULLY AS IT DESCRIBES YOUR RIGHTS, RESPONSIBILITIES, AND LIABILITIES. BY ACCESSING OR USING THE SERVICES OR OTHERWISE PROVIDING US WITH PERSONAL INFORMATION, YOU ARE CONSENTING TO THE TERMS OF THIS PRIVACY POLICY AND THE COMPANY’S TERMS OF USE AND ANY APPLICABLE COOKIE POLICY ON A SITE.

You must be at least eighteen (18) years of age to access the Services. RPM International Inc. is headquartered in the United States, and the personal information you provide to the Company may be processed and stored in the United States and other jurisdictions. For more information on our data transfer practices, please see Data Retention and Data Transfers.

1. Scope

In most instances this Privacy Policy will apply to personal information that the Company receives during its business operations as a “data controller.” This means we determine the purpose and means of processing such personal information.

For purposes of this Privacy Policy, the term “personal information” means any information that, alone or in conjunction with other information or data, identifies or is linked to a natural person and that is subject to, or otherwise afforded protection under, a data protection law, statute, or regulation. The term “personal information” does not include anonymized or de-identified data that is not attributable to a particular individual, household, or device and that is not otherwise subject to a data protection law, statute, or regulation. The Company may anonymize or de-identify personal information, and such data is not subject to this Privacy Policy, and the Company may use such data for any purpose.

In some instances, the Company may receive your personal information as a “data processor.” This means that another party determines the purpose and means of processing such personal information. In such cases the Company will process your personal information only on the written instructions of the data controller and to the extent reasonably necessary or appropriate for the performance of the services to which it is engaged, including the transfer of personal data to third countries, unless provided otherwise by applicable personal data protection laws.

2. The Types and Categories of Personal Information We Collect

The Company collects personal information in order to provide our Services, comply with our legal obligations, promote our business interests, and for the other reasons set forth in this Privacy Policy. When you do not provide personal information to the Company, we may not be able to provide you the Services or to complete a transaction you requested. Generally, we collect the following types and categories of personal information during our business operations:

Personal Information Category Description / Examples
Personal Identifiers Identifiers such as your name, alias, shipping address, email address, account name, telephone number, customer identification number.
Registration Data Information provided when you register for an account to use the Site, including usernames and passwords.
Online Identifiers Persistent identifiers that can be used to recognize you or your device over time and across different Services, including a device identifier, IP address, cookies, beacons, pixel tags, mobile ad identifiers, and similar technology.
Commercial Information Records of the Services you purchased, obtained, or considered, or your other purchasing or consuming histories or tendencies with respect to our Services.
Business Contact Data Information related to employees, owners, directors, officers, or contractors of a third-party organization with whom we conduct, or possibly conduct, business activities.
Health Data Health-related information in the event you, or a third party, suffers an injury or illness while visiting our locations or when using our Services.
Marketing and Communications Data Information with respect to your marketing preferences and your subscriptions to our publications and alerts.
Internet and Electronic Network Data Data pertaining to your access to or use of the Site, including browsing history, search history, interactions with the Site or advertisements, and device information.
Your Feedback Information you provide about our Services, including data gathered from surveys or reviews.
Visitor Information Information you provide when visiting our premises, including visitor logs, registries, vehicle and parking information.
Video and Images Images or videos you provide (e.g., your use of a Service) or that we capture via security systems or teleconferencing.
Geolocation Data Information about the general city, state, or region in which a user resides.
Professional or Employment Data If you apply for a job, we collect information in your resumé/CV, cover letter, and similar documentation, including contact details, employment history, education, qualifications, preferences, and information provided about or by your references.
Inferences Inferences drawn from some of the personal information categories identified herein and used to create a consumer profile reflecting your preferences, characteristics, and behavior.

3. Technical Data

When you access the Site, we collect certain data automatically using technical means and tools. From time to time, the Company or its service providers may release aggregate and de-identified reports derived from this technical and usage information.

Usage and Device Data

When you access and use the Site, we automatically collect details of your access and use, including traffic data, logs, and other communication data, the resources that you access, and information about your device and internet connection (e.g., device identifiers, operating system, browser type, mobile network information). The Site may also collect diagnostic data, such as crash data, performance data, and other technical information.

Cookies and Tracking Data

We use cookies and other tracking technologies within the Site. Cookies are small text files placed on your device. You may refuse certain cookies by activating the appropriate setting on your browser or device or by changing your cookie preferences on a Site; however, disabling cookies may cause some parts of the Site to not function properly. We may also use web beacons, pixels, and similar technologies to analyze usage, measure advertising effectiveness, and verify system integrity. For more information, see our Cookie Policy.

Site Monitoring

We use cookies and other tracking technologies to monitor and record activities and communications on the Site in order to safeguard, improve, and analyze usage of the Site and for the other purposes listed in this Privacy Policy. By using the Site, you consent to such monitoring and recording.

4. Sources of Information

First Party / Direct Collection

We collect personal information directly from you when you use our Services, provide a product review, visit our premises, or otherwise contact or engage with us.

Automated Collection

We may collect information through automated means when you use the Site (see “Technical Data” above).

Third-Party Sources

In accordance with applicable law, we may collect personal information about you from third parties such as public databases, advertising companies, social media platforms, and service providers, and combine it with information we already hold. We may also collect personal information in connection with background checks, credit checks, due diligence processes, and traditional business activities.

5. How We Use Your Information / Purpose of Collection

We may use the personal information we collect about you to perform our Services, comply with our legal obligations, and promote our business interests, including to:

  • Provide, operate, maintain, improve, and promote our Services.
  • Enable you to access and use our Services.
  • Process and complete transactions and send related information, including purchase confirmations and invoices.
  • Send messages and communications related to our Services (e.g., responses to your comments, questions, and requests).
  • Furnish technical notices, updates, security alerts, and support and administrative messages.
  • Provide promotional and marketing communications such as information about Services, features, surveys, newsletters, offers, promotions, contests, and events.
  • Process and deliver contest or sweepstakes entries and rewards.
  • Monitor and analyze trends, usage, and activities in connection with our Services.
  • Investigate and prevent fraudulent transactions, unauthorized access or use, and other illegal activities.
  • Personalize our Services, including providing features or advertisements that match your interests and preferences.
  • Carry out any other purpose for which we obtain your consent.

For the avoidance of doubt, you agree that the Company may contact you via any means, including SMS/text message and email and through the use of autodialing systems and services, to furnish information regarding product orders, shipping status, warranty information, and similar data pertaining to a commercial transaction.

6. Sharing Information / Third-Party Disclosures

We may share your personal information with certain organizations and third parties in accordance with applicable law, including as set out below.

Intra-Group

The Company is composed of affiliates and operating businesses worldwide, and we may disclose your personal information to such entities to provide, operate, maintain, improve, and promote our Services. For a list of affiliates and operating businesses, see https://www.rpminc.com/leading-brands/.

Service Providers

We may share your personal information with companies that provide services on our behalf, such as hosting, analytics, surveys, marketing, transaction processing (including rebates and returns), customer support, and quality improvement.

Payment Card Transactions

All online payments made through the Site are completed using third-party payment systems. We do not have access to your full payment card information for these transactions. Any personal or financial information you provide to payment processors is subject to their privacy policies and terms of use.

Distributors and Business Partners

We may share your personal information with third parties that distribute our goods, products, and marketing materials.

Marketing Partners

We partner with third-party service providers with whom we share online identifiers concerning your use of the Site, derived through cookies, pixels, and tags. You can manage preferences via our cookie management tool.

Business Restructuring

We may disclose your personal information as reasonably necessary in connection with a merger, acquisition, divestiture, or sale of all or a portion of the Company’s assets.

Legal; Compliance; Legitimate Interest

We may disclose personal information to third parties if required by law or government order, when necessary to defend or protect our legal or business interests, to protect and defend our rights or property, or in urgent circumstances to protect the health and safety of any individual.

Consent

We may disclose your personal information when you consent to the disclosure. If you facilitate a transaction with the Company or request information or services that require us to share your personal information with a service provider or third party, you hereby consent to such disclosure.

7. Social Media

We may engage with you on social media platforms (e.g., Facebook, Twitter, YouTube, Pinterest, Instagram). If you contact us for support or other reasons on such platforms, we may respond via direct message. Your use of social media platforms is subject to their own terms and privacy policies.

The Site may include social media features and widgets (such as “Like” or “Share” buttons) that may collect your IP address and the page you visited and may set a cookie. Your interactions with these features are governed by the privacy policy of the relevant social media provider.

This Privacy Policy only governs your use of our Services. We are not responsible for the content or privacy practices of third-party websites or organizations. The Site may include links to third-party websites or provide you the opportunity to disclose information directly to third parties (e.g., payment processors). You assume all risks associated with providing data to third parties. For information about their privacy practices, you should review their privacy statements.

9. Data Retention

How long we keep your personal information varies depending on why it was collected. We keep personal information to provide you with our Services, to facilitate transactions, to engage in marketing activities, and for as long as necessary to defend our legal or business interests. For example, we keep records of purchases for invoicing, tax, warranty, and liability purposes and correspondence as needed to protect against legal claims. Where you unsubscribe from our marketing communications, we keep a record of your email address to ensure we honour your preferences.

10. Data Transfers

RPM International Inc. is headquartered in the United States, and personal information that we collect and process may be retained and stored in the United States and other countries. These countries may not provide the same level of protection of personal information as your jurisdiction of residence. By continuing to provide us with personal information, you acknowledge and agree that your information will be transferred to and stored in the United States and such other countries, where it may be accessible to local government authorities pursuant to applicable laws.

11. Security

We use a variety of security technologies and procedures to help protect your personal information from unauthorized access, use, or disclosure. However, no information system can be fully secure, and we cannot guarantee the absolute security of your personal information. We are not responsible for the security of personal information you transmit over networks we do not control, including the internet and wireless networks.

The safety and security of your personal information also depends on you. Where you have a username and password for our Services, you are responsible for maintaining their confidentiality and for notifying us immediately if you believe they have been compromised. We may contact you via email or other electronic communications if we are legally required to notify you of a data security incident.

12. No Data Collected from Children

The Site is not directed at, nor intended for use by, children. If you are under the age of eighteen (18), you are prohibited from using the Services or providing us with personal information. If a parent or guardian believes that a child has provided us personal information, they should contact us to request deletion.

13. Publicly Posted Information; Product Reviews

You may be able to submit comments, opinions, ratings, or other content (collectively, “Product Reviews”) through the Site or provide feedback directly to us (“Feedback”). Any information you post in Product Reviews or Feedback may be publicly available and may be indexed by search engines. We recommend that you do not upload any information you wish to remain confidential.

As between you and the Company, any and all Product Reviews and Feedback are considered the Company’s confidential and proprietary information. You grant the Company a non-exclusive, perpetual, irrevocable, worldwide, royalty-free license, with the right to sublicense, to use, publish, and disclose such Product Reviews and Feedback in any manner and via any media, without reference to you as the source and without compensation.

14. Your Responsibilities

You may only provide personal information to the Company if it is accurate, reliable, and relevant to our relationship and does not violate any applicable law or infringe upon another person’s rights. If you provide personal information about a third party, you represent and warrant that you have authority to do so and that our use of such information as described in this Privacy Policy will not violate any person’s rights. You agree to indemnify the Company for any claims or damages arising from your provision of personal information to us.

15. Updating Your Information

It is important that the personal information you provide is accurate and reliable. In certain circumstances, you may update your information directly in your online account. Where that is not possible, you must notify us of changes to your personal information using the details in the Contact Us section.

16. Email Marketing Opt-Out

You have the right to opt out of receiving email and direct-mail marketing communications from us. Where required by law, our marketing emails contain an “unsubscribe” link. You may also opt out by contacting us as set out in the Contact Us section. We may still send business-related communications, such as order confirmations or recall notices, even if you opt out of marketing.

17. Biometric Data

Where permitted by law and in limited circumstances, we may collect biometric data and biometric identifiers (for example, information derived from scanning facial geometry or thermal temperature) for health, safety, administrative, or security purposes. We retain such data only as permitted by law and for no longer than necessary to fulfil its purpose, and we maintain protocols for secure destruction or disposal. We may disclose biometric identifiers to third parties in the same manner we disclose personal information under this Privacy Policy.

18. Do-Not-Track Signals

Some web browsers may transmit “do-not-track” signals. Unless otherwise required by law, we currently do not take action in response to these signals.

19. Persons with Disabilities

We strive to ensure that everyone has access to information related to our Services, including this Privacy Policy. Please contact us if you would like this Privacy Policy provided in an alternative format.

20. Rewards Programs and Financial Incentives

We may collect and use personal information to administer financial incentive, rewards, and loyalty programs (“Rewards Programs”). We use the information you provide to verify your identity, offer rewards, track program status, and facilitate redemptions. Participation is voluntary, and you may withdraw at any time by contacting us. We may use personal information from Rewards Programs for other purposes consistent with this Privacy Policy.

21. Events and Video Teleconferencing

We host and use video teleconferencing platforms to facilitate conferences, meetings, training, and other programs, often using third-party providers (e.g., Google, Zoom, WebEx). These platforms may record content and store it on our or our providers’ systems. By participating, you consent to the collection, retention, and recording of information shared during these events.

22. Canada Privacy Rights

Personal data (as defined in the Personal Information Protection and Electronic Documents Act of Canada (“PIPEDA”)) shall be treated as personal information and will be collected, stored, used, and processed in accordance with this Privacy Policy and our obligations under PIPEDA and applicable Canadian provincial laws.

You have the right to request access to the personal information we hold about you and to request corrections to inaccurate personal information. When requesting access or correction, we will verify your identity and may request additional information. We may charge a reasonable fee for access, where permitted.

Your right to access is not absolute, and we may decline access in certain circumstances (for example, if the information contains personal information of other persons or is subject to legal privilege). If we cannot provide access or make a correction, we will inform you of the reasons, subject to legal restrictions. To delete your name from our electronic contact lists, follow the opt-out instructions in the Email Marketing Opt-Out section or contact us as outlined in Contact Us. If you have concerns with our data processing, you may file a complaint with the Office of the Privacy Commissioner of Canada.

23. European Union (EU), Switzerland, and United Kingdom (UK) Privacy Rights

Data Protection Rights

If you are located in the EU, Switzerland, or the UK, you have the following rights, subject to applicable law:

  • Right to Know – to be informed about the personal information we collect and process about you.
  • Access Rights – to request access to your personal information.
  • Rectification – to request correction of inaccurate or incomplete personal information.
  • Erasure – to request deletion of your personal information in certain circumstances.
  • Restriction of Processing – to request that we restrict processing of your personal information.
  • Data Portability – to receive personal information you have provided to us in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
  • Right to Object – to object to processing based on legitimate interests, including profiling, and to object at any time to processing for direct marketing.
  • Withdraw Consent – where processing is based on consent, to withdraw that consent at any time.

To exercise these rights, please contact us or have your authorized agent contact us using the details in the Contact Us section. We may need to verify your identity and the authenticity of your request.

Legal Basis for Processing

We process personal information on the following legal bases:

  • Consent – when you have given consent (e.g., to receive marketing communications, or when you contact us voluntarily).
  • Legitimate Interests – for purposes such as monitoring use of the Site, improving our Services, and protecting our legal interests.
  • Contract – where processing is necessary for the performance of a contract with you (e.g., processing orders).
  • Legal Obligation – where processing is required to comply with legal or statutory obligations (e.g., tax reporting).

Complaints

If you have concerns about our data processing, you may file a complaint with your local data protection authority. Contact details for EU authorities are available at https://edpb.europa.eu/about-edpb/about-edpb/members_en. For Switzerland, contact the Federal Data Protection and Information Commissioner; for the UK, contact the Information Commissioner’s Office (www.ico.org.uk). We would appreciate the opportunity to address your concerns first and encourage you to contact us directly.

24. California Privacy Rights

Data Privacy Rights

If you are a California resident, you may have the following rights under the California Consumer Privacy Act (“CCPA”) as amended by the California Privacy Rights Act (“CPRA”):

  • Right to Know (Specific Pieces) – to request the specific pieces of personal information we have collected about you.
  • Right to Know (Categories) – to request information about the categories of personal information we collect, the sources, purposes, and categories of third parties with whom we share it.
  • Right to Delete – to request deletion of personal information we have collected, subject to legal exceptions.
  • Right to Correct – to request correction of inaccurate personal information.
  • Nondiscrimination – to not receive discriminatory treatment for exercising your rights.

Submitting a Privacy Request

To submit a privacy request, you may contact us by email at [email protected], via webform at https://www.rpminc.com/contact-rpm/, by telephone at 1 (800) 776-4488, or by mail at RPM International Inc., ATTN: Privacy Request, 2628 Pearl Road, Medina, OH 44256. You may also designate an authorized agent registered with the California Secretary of State to act on your behalf.

Verification Process

We will take steps to verify your identity (and the identity of your authorized agent, if applicable) before responding to your request, such as verifying your email address and matching certain information with our records. Rights under the CCPA/CPRA are subject to legal exceptions.

Opt-Out Rights

We do not sell your personal information for monetary consideration and therefore do not offer a “Do Not Sell My Personal Information” opt-out for such sales. We may “share” personal information for targeted advertising purposes; California residents may opt out of such sharing by using our cookie management tool (often labelled “Your Privacy Choices” or “Do Not Sell/Share My Personal Information”) or by contacting us as described in the Contact Us section.

We do not knowingly sell or share the personal information of minors under eighteen (18) years of age, and we do not use or disclose sensitive personal information for purposes beyond those permitted by the CCPA.

25. Nevada Privacy Rights

We do not currently conduct “sales” of personal information as defined under Nevada law. Nevada residents may submit a request directing us not to sell personal information in the future by contacting us as described in the Contact Us section.

26. Virginia Privacy Rights

If you are a Virginia resident, subject to legal exceptions, you may have the right to:

  • Confirm whether we are processing your personal information and access such information.
  • Correct inaccuracies in your personal information.
  • Request deletion of your personal information.
  • Obtain a copy of personal information you previously provided to us in a portable and, where technically feasible, readily usable format.

You may submit a privacy request via email at [email protected], via webform at https://rpminc.com/contact/, by telephone at 1 (800) 776-4488, or by mail at RPM International Inc., ATTN: Privacy Request, 2628 Pearl Road, Medina, OH 44256.

We will verify your identity before responding. If you wish to appeal a decision we have made regarding your privacy request, you may email [email protected] with the subject line “PRIVACY REQUEST: APPEALS.” You may also contact the Virginia Attorney General for further assistance.

We do not sell personal information for monetary consideration and therefore do not provide a sale opt-out. You may opt out of targeted advertising by adjusting your cookie preferences using our cookie management tool. We do not engage in profiling that produces legal or similarly significant effects.

27. Australia Privacy Rights

The personal information we collect from individuals in Australia will be treated in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and this Privacy Policy.

You may contact us (see Contact Us) to request access to the personal information we hold about you and/or to request corrections at any time. If we refuse access, we will provide written reasons. We may charge reasonable costs incurred in providing access. We are not obliged to correct your personal information if we do not agree it requires correction; if we refuse your request, we will provide written reasons. We will respond to all requests for access or correction within a reasonable period.

If you have questions, concerns, or complaints about this Privacy Policy or how we handle your personal information, please contact our Privacy Champion using the details in the Contact Us section. We take all complaints seriously and will respond within a reasonable period. If you are dissatisfied with our response, you may contact the Office of the Australian Information Commissioner:

Office of the Australian Information Commissioner
GPO Box 5218, Sydney NSW 2001
Telephone: 1300 363 992
Email: [email protected]

28. New Zealand Privacy Rights

If you are located in New Zealand, you may contact us (see Contact Us) to request access to the personal information we hold about you and/or to request corrections at any time. If we refuse access, we will provide written reasons. We may charge reasonable costs incurred in providing access. We are not obliged to correct your personal information if we do not agree it requires correction; if we refuse your request, we will provide written reasons. We will respond to all access or correction requests within a reasonable period.

If you have questions, concerns, or complaints about this Privacy Policy or how we handle your personal information, please contact us using the details below. We take all complaints seriously and will respond within a reasonable period. If you are dissatisfied with the handling of your complaint, you may contact the New Zealand Privacy Commissioner:

New Zealand Privacy Commissioner
PO Box 10 094, Wellington 6143
Telephone: 0800 803 909
Email: [email protected]

29. Changes to the Policy

We reserve the right to amend this Privacy Policy at any time. The “Last Updated” date at the top identifies when it was last revised. It is your responsibility to review this Privacy Policy periodically. Your continued use of the Services after any amendments signifies your consent to the updated Privacy Policy. We may, in our discretion, notify you of changes via email or other communications, but such notifications do not limit your responsibility to review this Privacy Policy.

30. Contact Us

If you have any questions or concerns about this Privacy Policy, or would like to submit a privacy request, you may contact us using any of the following methods:

Locate a Rust-Oleum Retailer

Rust-Oleum products are sold in hardware stores, mass merchants and specialty retailers across the country. Use our store locator to find Rust-Oleum products at retailers near you.
Find a Retailer